CVE-2016-3313CWE-119

CVE-2016-3313

High · published August 10, 2016

CVSS v3.0
7.8
EPSS
50%
Percentile
98.9
In the wild
Unconfirmed
What it is

Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016, Word 2016 for Mac, and Word Viewer allow remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Office Memory Corruption Vulnerability."

The record
Technical detail
CVSS v3.0
7.8 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.49831 · 98.9th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2016-08-10T01:59Z
Affected products (6)
ProductVersionsFixed in
microsoft/officeall versions—
microsoft/officeall versions—
microsoft/officeall versions—
microsoft/officeall versions—
microsoft/word_for_macall versions—
microsoft/word_viewerall versions—
References (8)
http://www.securityfocus.com/bid/92289 · [email protected]http://www.securitytracker.com/id/1036559 · [email protected]https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-099 · [email protected]https://www.exploit-db.com/exploits/40224/ · [email protected]http://www.securityfocus.com/bid/92289 · af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id/1036559 · af854a3a-2127-422b-91ae-364da2661108https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-099 · af854a3a-2127-422b-91ae-364da2661108https://www.exploit-db.com/exploits/40224/ · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 22 SEP 03:12Z
    EPSS moved 50% → 40%
    epss
  • 06 SEP 03:09Z
    EPSS moved 50% → 40%
    epss
  • 30 AUG 15:31Z
    EPSS moved 40% → 50%
    epss
  • 29 AUG 04:11Z
    EPSS moved 50% → 40%
    epss
  • 09 AUG 21:00Z
    Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016, Word 2016 for Mac, and Word Viewer allow remote attackers to execute arbitrary code via a…
    cvelistv5